Last added rule wins.
Child resources NOT grant access to their parents;
child resource inherit access from parents; add priorities.